Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

Xpect AG
Poststraße 37
66482 Zweibrücken
Germany
Phone: +49 681 3720 2670
Email: sales@xpect.ai

Xpect AG is represented by its Executive Board, Dr.-Ing. Mathias Bauer.

2. Data Protection Officer

You can reach our Data Protection Officer, Gregor Theado, at the address above, marked “Attn: Data Protection Officer”.

3. Summary

This website does not set cookies, does not store any information in your browser and does not use analytics or tracking tools. Fonts, images and scripts are loaded exclusively from our own server; no data is transferred to third parties when you visit. Consent (a “cookie banner”) is therefore not required.

4. Provision of the website

When you visit our website, our server processes the data that your browser transmits for technical reasons:

  • IP address
  • date and time of access
  • page or file requested, HTTP status code and amount of data transferred
  • referrer URL (previously visited page), if transmitted
  • browser type and version and operating system (user agent)

This processing serves to deliver the website, ensure stability and security, and analyze errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of the website.

This data is processed only for the duration of the request. We do not store access logs (server log files). If a server error occurs while handling a request, it is logged for error analysis; the IP address is stored only in shortened form (for IPv4 without the last byte, for IPv6 only the first 48 bits), so that it can no longer be attributed to an individual connection. These entries are automatically deleted after no more than 7 days. They are not combined with other data sources. Transmission between your browser and our server is encrypted via HTTPS (TLS).

5. Hosting

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR; IONOS processes the data solely on our instructions.

6. Contacting us

If you contact us by email or phone, we process the information you provide (for example name, email address, phone number and the content of your inquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

For email, we use Microsoft 365 provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes emails that you send to us or receive from us on our behalf as a processor pursuant to Art. 28 GDPR, based on the Microsoft Products and Services Data Protection Addendum. Processing by Microsoft Corporation in the USA, for example in the context of support or security measures, cannot be ruled out. Microsoft is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR) and additionally on EU standard contractual clauses (Art. 46 GDPR).

Emails are usually transmitted between mail servers with TLS encryption, provided your email provider supports it; end-to-end encryption is not used by default. The email links on this website merely open your own email program – the website does not transmit any data in doing so.

We delete this data as soon as it is no longer needed to handle your request. We retain business correspondence where statutory retention obligations require it (in particular Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO): six to ten years, depending on the type of document).

7. Links to other websites

Our pages contain links to other websites, such as LinkedIn and the ERDF funding portal of the State of Rhineland-Palatinate. These are simple links: data is only transferred when you click a link and open the target page. The respective provider is responsible for any processing there.

8. Recipients and transfers to third countries

In operating this website, apart from us only our hosting provider, acting as a processor, has access to the data mentioned. No data is transferred to countries outside the EU or EEA in this context. For emails sent to us, the information in section 6 applies.

9. Your rights

Under the GDPR, you have the following rights:

  • access to the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, an informal message to the contact details above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.

10. Obligation to provide data and automated decision-making

You are not obliged to provide us with personal data. However, the website cannot be displayed without the technically necessary processing of your IP address. We do not use automated decision-making, including profiling.

Last updated: October 2026